EIP-2026-112495

This exploit demonstrates a stored XSS vulnerability in Support Board 3.3.4 by injecting a malicious script into the 'message' parameter via an AJAX POST request. The payload bypasses basic input filtering using mixed case and URL encoding.